豆豆友情提示：这是一个非官方 GitHub 代理镜像，主要用于网络测试或访问加速。请勿在此进行登录、注册或处理任何敏感信息。进行这些操作请务必访问官方网站 github.com。 Raw 内容也通过此代理提供。
Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

GitHub reviewed advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
49
GitHub Actions
49
Go
3,549
Maven
5,000+
npm
5,000+
NuGet
917
pip
4,798
Pub
13
RubyGems
1,038
Rust
1,237
Swift
53
Unreviewed advisories
All unreviewed
5,000+

1,544 advisories

Loading
Calling the scanf family of functions with a %mc (malloc'd character match) in the GNU C Library... Unknown Unreviewed
CVE-2026-5450 was published Apr 20, 2026
KissFFT before commit 8a8e66e contains an integer overflow vulnerability in the kiss_fftndr_alloc... High Unreviewed
CVE-2026-41445 was published Apr 20, 2026
SD-330AC and AMC Manager provided by silex technology, Inc. contain a heap-based buffer overflow... Critical Unreviewed
CVE-2026-32956 was published Apr 20, 2026
SD-330AC and AMC Manager provided by silex technology, Inc. contain a heap-based buffer overflow... Moderate Unreviewed
CVE-2026-32961 was published Apr 20, 2026
Creolabs Gravity before 0.9.6 contains a heap buffer overflow vulnerability in the... Critical Unreviewed
CVE-2026-40504 was published Apr 16, 2026
Heap buffer overflow in PDFium in Google Chrome prior to 147.0.7727.101 allowed a remote attacker... High Unreviewed
CVE-2026-6306 was published Apr 15, 2026
Heap buffer overflow in PDFium in Google Chrome prior to 147.0.7727.101 allowed a remote attacker... High Unreviewed
CVE-2026-6305 was published Apr 15, 2026
Heap buffer overflow in PDFium in Google Chrome on Windows prior to 147.0.7727.101 allowed a... High Unreviewed
CVE-2026-6361 was published Apr 15, 2026
Heap buffer overflow in Skia in Google Chrome prior to 147.0.7727.101 allowed a remote attacker... Moderate Unreviewed
CVE-2026-6298 was published Apr 15, 2026
Heap buffer overflow in ANGLE in Google Chrome prior to 147.0.7727.101 allowed a remote attacker... Critical Unreviewed
CVE-2026-6296 was published Apr 15, 2026
Adobe Framemaker versions 2022.8 and earlier are affected by a Heap-based Buffer Overflow... High Unreviewed
CVE-2026-27293 was published Apr 15, 2026
Adobe Framemaker versions 2022.8 and earlier are affected by a Heap-based Buffer Overflow... Moderate Unreviewed
CVE-2026-27301 was published Apr 15, 2026
ImageMagick has a heap buffer overflow read in magnify operation via unrecognized magnify:method value Low
GHSA-8vfj-q2cp-5m5j was published for Magick.NET-Q16-AnyCPU (NuGet) Apr 14, 2026
e1abrador Credited to e1abrador
Bridge versions 16.0.2, 15.1.4 and earlier are affected by a Heap-based Buffer Overflow... High Unreviewed
CVE-2026-27313 was published Apr 14, 2026
Bridge versions 16.0.2, 15.1.4 and earlier are affected by a Heap-based Buffer Overflow... High Unreviewed
CVE-2026-27311 was published Apr 14, 2026
Bridge versions 16.0.2, 15.1.4 and earlier are affected by a Heap-based Buffer Overflow... High Unreviewed
CVE-2026-27310 was published Apr 14, 2026
Bridge versions 16.0.2, 15.1.4 and earlier are affected by a Heap-based Buffer Overflow... High Unreviewed
CVE-2026-27312 was published Apr 14, 2026
Bridge versions 16.0.2, 15.1.4 and earlier are affected by a Heap-based Buffer Overflow... High Unreviewed
CVE-2026-34630 was published Apr 14, 2026
ImageMagick has a heap out-of-bounds write in JP2 encoder Moderate
CVE-2026-40310 was published for Magick.NET-Q16-AnyCPU (NuGet) Apr 14, 2026
jakelamberson Credited to jakelamberson
ImageMagick has a heap buffer overflow when encoding JXL image with a 16-bit float Moderate
CVE-2026-40183 was published for Magick.NET-Q16-AnyCPU (NuGet) Apr 14, 2026
jakelamberson Credited to jakelamberson
ImageMagick has a heap buffer overflow (WRITE) in the YAML and JSON encoders. Moderate
CVE-2026-40169 was published for Magick.NET-Q16-AnyCPU (NuGet) Apr 14, 2026
zer0matt Credited to zer0matt
InDesign Desktop versions 20.5.2, 21.2 and earlier are affected by a Heap-based Buffer Overflow... High Unreviewed
CVE-2026-34628 was published Apr 14, 2026
InDesign Desktop versions 20.5.2, 21.2 and earlier are affected by a Heap-based Buffer Overflow... High Unreviewed
CVE-2026-34627 was published Apr 14, 2026
InDesign Desktop versions 20.5.2, 21.2 and earlier are affected by a Heap-based Buffer Overflow... High Unreviewed
CVE-2026-34629 was published Apr 14, 2026
Heap-based buffer overflow in Microsoft Graphics Component allows an unauthorized attacker to... High Unreviewed
CVE-2026-32221 was published Apr 14, 2026
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database